Effective date: 28 September 2026 · Notice version 3
Short version: Gameplay telemetry, crash reports, and save snapshots are optional and off by default. We do not sell personal data, use it for advertising, or make automated decisions about players. You can withdraw your choices in the game at any time.
1. Controller and contact
The data controller is Roman Bolzern, sole proprietor, Switzerland, operating Humanity Ascends under Onyxa and Grand Epoch Games.
Privacy questions and requests: support@humanityascends.com
2. Data we process
Optional gameplay telemetry
If you opt in, we process your SteamID64, public Steam persona name, game version and build, session and playthrough identifiers, timestamps, epoch and turn progression, tutorial and game-event progress, action usage and blocked attempts, population and resource summaries, performance measurements, error signals, language, operating system, screen resolution, hardware information, and explicit game settings. We do not collect raw key bindings or infer sensitive characteristics.
Optional save snapshots
If you separately enable save sharing, the game may upload a compressed save snapshot at the end of a session. It contains game-world, unit, building, research, and resource state so bugs can be reproduced. Save sharing cannot be enabled unless gameplay telemetry is enabled.
Bug reports and feedback
When you deliberately submit a bug report or feedback, we receive the text you enter, your SteamID64 and public Steam name, any optional email address, game and device diagnostics, and a screenshot. Bug reports may also include a recent game log and autosave, as stated in the submission form. General feedback does not include an autosave.
Optional crash diagnostics
If you opt in to gameplay telemetry, the game also sends technical crash and error information, and a small sample of performance traces, to our self-hosted GlitchTip service. A crash record can include a stack trace, game and Unity versions, operating system, hardware information, SteamID64, and public Steam name so a failure can be correlated with related diagnostics or a report you submit. If you do not opt in, the game sends no crash reports.
Website, service, and email data
Our website, API, and reverse proxy process IP addresses, request timestamps, requested paths, response status codes, and security logs when a device connects. If you email us, we process your address, message, and related correspondence so we can reply.
Local saves, Steam Cloud, achievements, and purchases
Ordinary save files remain on your device unless you separately enable a telemetry save snapshot as described above. If you enable Steam Cloud, Valve synchronizes those files under Valve’s policy. Steam handles purchases, ownership, achievements, and platform services. We do not receive your Steam password or payment-card details.
3. Purposes and legal bases
- Gameplay telemetry, crash diagnostics, and save snapshots: understanding progression, balance, usability, compatibility and performance, and diagnosing and reproducing defects. Legal basis: your consent under Article 6(1)(a) GDPR.
- Bug reports, feedback, and optional contact details: reviewing your submission, investigating an issue, and replying when appropriate. Legal basis: your deliberate submission and consent under Article 6(1)(a) GDPR.
- Service-security logs: preventing abuse and securing our systems. Legal basis: our legitimate interests in reliable and secure services under Article 6(1)(f) GDPR.
- Support and privacy correspondence: handling your request and replying. Legal basis: taking steps at your request, complying with legal duties, and our legitimate interest in providing support.
- Website presentation: presenting a readable public website with self-hosted fonts. Legal basis: our legitimate interest in operating the website.
- Legal requests and claims: complying with binding law or establishing and defending legal claims. Legal basis: legal obligation or legitimate interests under Articles 6(1)(c) and 6(1)(f) GDPR.
4. Recipients and locations
Access is limited to the developer and providers needed to operate the game and website:
- Netcup: infrastructure hosting in Germany for the website, API, database, backups, and self-hosted crash diagnostics.
- Migadu: email hosting when you email us or provide an address for a reply.
- Valve: the independent provider of Steam and Steamworks, under Valve’s Privacy Policy.
- Unity Technologies: the independent provider of the Unity engine the game is built with. The engine may send technical engine diagnostics to Unity under Unity’s Privacy Policy. The game switches off the engine’s device statistics unless you opt in to gameplay telemetry.
We do not sell, rent, or disclose player data for advertising.
5. Retention
- Gameplay telemetry: up to 730 days.
- Uploaded telemetry save snapshots: up to 30 days.
- Bug reports, feedback, and their attachments: up to 365 days, unless an earlier deletion request applies or longer retention is required for an active legal matter.
- Crash events in GlitchTip: up to 90 days.
- Support and privacy email: up to two years after the last substantive exchange, unless it is needed longer for an unresolved request or legal obligation.
- Operational and security logs: retained according to configured log rotation and only as long as reasonably needed to operate and secure the service. Relevant records may be isolated for longer while investigating abuse or a security incident.
- Backups expire through a rotating backup schedule. Deleted data may remain in an encrypted or access-controlled backup until that backup expires and will not be restored except for disaster recovery.
6. Your choices and rights
You may turn gameplay telemetry (including crash reports) and save sharing off under Options → Gameplay. This stops new collection, switches off the crash reporter, and clears unsent telemetry from the device. Withdrawal does not affect processing that was lawful before withdrawal.
Depending on applicable law, you may request access, a machine-readable copy, correction, deletion, restriction, or portability of your data, and may object to processing based on legitimate interests. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner or the data-protection authority in your country.
Email support@humanityascends.com with your SteamID64 and the right you wish to exercise. To prevent disclosure or deletion of another person’s data, we may ask you to verify control of the relevant Steam account. We normally respond within one month.
7. Children
Optional telemetry is not intended to be enabled by a child who cannot legally consent under the law where they live. A parent or guardian should make the choice where required. If you believe a child has submitted personal data improperly, contact us so we can investigate and delete it where appropriate.
8. Security and policy changes
We use TLS encryption in transit, restricted administration, access controls, and encrypted or access-controlled backups. No system is completely secure, but we limit collection and access to what is needed.
Material changes to optional telemetry purposes, data categories, recipients, or retention will increment the in-game notice version and require a new choice before collection resumes. We will update the effective date above when this policy changes.